{"id":"CVE-2024-35160","aliases":["EUVD-2024-35718","GHSA-g863-pp98-8m8m"],"status":"published","title":"IBM Watson Query on Cloud Pak for Data and IBM Db2 Big SQL on Cloud Pak for Data information disclosure","description":"IBM Watson Query on Cloud Pak for Data 1.8, 2.0, 2.1, 2.2 and IBM Db2 Big SQL on Cloud Pak for Data 7.3, 7.4, 7.5, and 7.6 could allow an authenticated user to obtain sensitive information due to insufficient session expiration.","severity":{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00357,"percentile":0.29693,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-613"],"published":"2024-11-23T13:48:16Z","modified":"2026-06-17T07:34:27Z","products":[{"vendor":"ibm","product":"big_sql"},{"vendor":"ibm","product":"db2 big sql on cloud pak for data"},{"vendor":"ibm","product":"watson query for cloud pak for data"},{"vendor":"ibm","product":"watson_query_with_cloud_pak_for_data"}],"references":[{"url":"https://www.ibm.com/support/pages/node/7168703","tags":["vendor-advisory","Vendor Advisory"]},{"url":"https://www.ibm.com/support/pages/node/7176947","tags":["vendor-advisory","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-35160"},{"url":"https://github.com/advisories/GHSA-g863-pp98-8m8m"}],"sources":{"cve":[{"id":"CVE-2024-35160","title":"IBM Watson Query on Cloud Pak for Data and IBM Db2 Big SQL on Cloud Pak for Data information disclosure","description":"IBM Watson Query on Cloud Pak for Data 1.8, 2.0, 2.1, 2.2 and IBM Db2 Big SQL on Cloud Pak for Data 7.3, 7.4, 7.5, and 7.6 could allow an authenticated user to obtain sensitive information due to insufficient session expiration.","status":"published","published":"2024-11-23T13:48:16.11Z","modified":"2024-11-24T12:30:18.144Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-613"],"updated_at":"2026-11-02T14:34:20.313092Z"}],"euvd":[{"id":"EUVD-2024-35718","description":"IBM Watson Query on Cloud Pak for Data 1.8, 2.0, 2.1, 2.2 and IBM Db2 Big SQL on Cloud Pak for Data 7.3, 7.4, 7.5, and 7.6 could allow an authenticated user to obtain sensitive information due to insufficient session expiration.","status":"published","published":"2024-11-23T13:48:16Z","modified":"2024-11-24T12:30:18Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-03T00:04:49.727757Z"}],"ghsa":[{"id":"GHSA-g863-pp98-8m8m","title":"IBM Watson Query on Cloud Pak for Data 1.8, 2.0, 2.1, 2.2 and IBM Db2 Big SQL on Cloud Pak for...","description":"IBM Watson Query on Cloud Pak for Data 1.8, 2.0, 2.1, 2.2 and IBM Db2 Big SQL on Cloud Pak for Data 7.3, 7.4, 7.5, and 7.6 could allow an authenticated user to obtain sensitive information due to insufficient session expiration.","status":"published","published":"2024-11-23T15:32:28Z","modified":"2024-11-23T15:32:36Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"cwes":["CWE-613"],"updated_at":"2026-11-02T14:58:56.443174Z"}],"nvd":[{"id":"CVE-2024-35160","description":"IBM Watson Query on Cloud Pak for Data 1.8, 2.0, 2.1, 2.2 and IBM Db2 Big SQL on Cloud Pak for Data 7.3, 7.4, 7.5, and 7.6 could allow an authenticated user to obtain sensitive information due to insufficient session expiration.","status":"published","published":"2024-11-23T14:15:18.393Z","modified":"2026-06-17T07:34:27.64Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-613"],"updated_at":"2026-11-02T14:10:38.347238Z"}]}}